CVE-2026-112363 Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo

Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetchsslcertificate=true with crafted userinfo URLs so...

CVE-2026-112363 Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo

Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetchsslcertificate=true with crafted userinfo URLs so...

CVE-2026-112363

Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetchsslcertificate=true with crafted userinfo URLs so...

CVE-2026-112363

The Crawl4AI library (versions 0.8.7 through 0.9.5 ) is vulnerable to a Server-Side Request Forgery (SSRF) within the Docker API server . The root cause stems from differences in URL userinfo parsing , allowing unauthenticated attackers to bypass destination checks. By setting fetch_ssl_certifica...

SUSE-SU-2026:24279-1 Security update for docker

This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265782. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allow...

PT-2026-117471

Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch ssl certificate=true with crafted userinfo URLs so...

CVE-2026-112363: Server-Side Request Forgery (SSRF)

Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetchsslcertificate=true with crafted userinfo URLs so...

ROS-20261019-73-0026

The vulnerability in Docker CE is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

BentoML command injection vulnerability

BentoML versions 1.4.39 and earlier have a command injection vulnerability. This vulnerability arises from the newline characters embedded in the docker.env mapping key being rendered by the old base.j2 template, thereby allowing them to be injected into Dockerfile commands. An attacker can provi...

UncleCode Crawl4AI Server Request Forgery Vulnerability

The UncleCode Crawl4AI version from 0.8.7 to 0.9.5 has a server-side request forgeing vulnerability. This vulnerability stems from the Docker API server’s server-side request forgeing flaw. Unauthenticated attackers can bypass target checks by exploiting differences in URL user information parsin...

React2Shell-CVE-2025-55182

HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 A HackIndex.io sandbox environment for the React2Shell vulnerability. This will start a web app on port 3000, and a SSH server on port 2222. Start the environment docker compose up --build --force-recreate SSH Web admin Port 2222 webadm...

ipmap

English readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • Italian readme • Русский readme • Indonesian readme • فارسی readme • عربي readme • Türkçe readme • Polskie readme يحدد تطبيق...

[SECURITY] Fedora 43 Update: docker-buildx-0.38.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

CLEANSTART-2026-DC26983 Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled

Security vulnerability affects the gitea package. Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled...

Fedora 43 : docker-buildx (2026-60dcacbb4f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-60dcacbb4f advisory. - Update to release v0.38.0 - Resolves: rhbz2544412 ---- - Update to release v0.37.2 - Resolves: rhbz2544198 - Resolves CVE-2026-56855: rhbz2530594 ...

CVE-2026-81870 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-81870 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-81870 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-81870 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-92543 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-92543 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...

CVE-2026-78659 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-78659 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78659 affecting package docker-compose for versions less than 2.27.0-16

CVE-2026-78659 affecting package docker-compose for versions less than 2.27.0-16. A patched version of the package is available...